This commit is contained in:
Egor Matveev 2022-02-11 22:47:05 +03:00
parent 64cb86a13b
commit 8e94f38b64

View File

@ -36,7 +36,7 @@ class SolutionsTableView(BaseView):
if "username" in self.request.GET and self.request.user.username == self.request.GET['username']: if "username" in self.request.GET and self.request.user.username == self.request.GET['username']:
return return
if hasattr(self.entities, "set"): if hasattr(self.entities, "set"):
if self.entities.set.creator != self.request.user: if self.entities.set.creator != self.request.user and self.request.user.username not in self.entities.editors:
raise AccessError() raise AccessError()
if hasattr(self.entities, "task"): if hasattr(self.entities, "task"):
if self.entities.task.creator != self.request.user and self.request.user.username not in self.entities.task.editors: if self.entities.task.creator != self.request.user and self.request.user.username not in self.entities.task.editors: